RE: Audting object access on a DC

Wow! I thought i had to enable auditing of abject access in a policy and then
go to the directory and enable if there as well. If i am understanding you
correctly all i have to do is go to the directory and enable auditing on the
dir and i dont have to edit the policy?

Many thanks

"Allen Firouz" wrote:

> Skipster:
>
> Auditing "Object Access" in AD will log any and all object access throughout
> your domain (which can lead to huge event logs). If you want to audit a
> particular partition or directory, then what you have already described
> (auditing the folder or partition) will yield more useful information. This
> is by design! You can turn off Object Access auditing in AD and simply have
> the folders you want audited and your logs will reflect that.
>
> You can post GPO related questions here!
>
> -Allen Firouz
>
> "Skipster" wrote:
>
> > Hello all
> >
> > My windows 2003 DC is also my file server. I need to audit a directory on
> > this server and all sbu dirs of the parent dir for anyone who delets files. I
> > have enabled the parent dir for audting and i have edited the default domain
> > controllers GPO to enable object access. This part seems to be working as i
> > can check the security logs on the DC and it shows who is accessing the
> > folder, *but* it seems that the server is auditing any and all access to all
> > resources, services and applications on the server. I dont want this i want
> > it to audit access to the folder where i turned on auditng. How do i correct
> > this?
> >
> > Many thanks. Also where is the newsgroup for GPO's ?
.

Relevant Pages

  • RE: Audting object access on a DC
    ... Auditing "Object Access" in AD will log any and all object access throughout ... the folders you want audited and your logs will reflect that. ... I need to audit a directory on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Auditing.. We all love it...
    ... collating security event logs, sounds like one might be useful for you. ... The security here is really high. ... > to enable auditing for the entire %SystemDrive% on each workstation. ... object access is what Im trying to audit ...
    (microsoft.public.win2000.group_policy)
  • RE: log file for folders
    ... You will need to enable autiting of object access. ... Open the Group Policy management help and review the setting "Audit object ... then go to the auditing tab on the folderand enable auditing there also. ... Microsoft Windows Small Business Server 2003 ...
    (microsoft.public.windows.server.sbs)
  • Re: Can you audit file access within Sharepoint Services 3.0?
    ... you can't enable it with Windows Explorer nor can you enable it with any out of the box stsadm command. ... Maybe one of the SharePoint-specific management tools from Quest Software or AvePoint allows you to view those logs but I haven't checked. ... an interface to turn on/off auditing; ... view the audit records so you'd have to build that as well. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: log file how to?
    ... Once auditing is enabled, you might also try ElUnDump for html-based reports ... of Windows event logs. ... > You can enable auditing on your computers however for what you would want ...
    (microsoft.public.win2000.networking)